Security
The safeguards behind the privacy promises.
De-identified before it leaves
Your bill is de-identified in your browser, and a residual-PII check runs before anything is sent — if personal information might still be present, the bill is not sent at all.
Encrypted results
The full audit result is sealed with AES-256-GCM. The decryption key lives only on the server, never in your browser, and the result is bound to its own contents so it can't be swapped.
Payment-gated server-side
The $20 result is gated on the server — the full findings and letter are never returned in the clear until payment is verified.
Minimal recovery state
The 24-hour recovery copy stores only the encrypted blob, keyed by a hash, and expires automatically. All traffic is served over HTTPS in production.
No system is perfectly secure; this describes the safeguards in place, not a guarantee.